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The joint solution by 
Qualys and FireMon 
determines which 
vulnerabilities are at 
the greatest risk of 
real-world attack. 


It enables a risk-centric 
approach to finding and 
fixing vulnerabilities that 
delivers greater security 
and compliance with 
less effort and expense. 
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Real-time, Risk-centric Vulnerability Discovery 
and Remediation with Qualys and FireMon 


Figuring out what to fix first when vulnerabilities arise is crucial to minimizing security 
and compliance risks, especially in large networks. Qualys and FireMon have made 
this never-ending task easier and more automatic by integrating QualysGuard® 
Vulnerability Management (VM) and FireMon® Security Manager with Risk Analyzer. 
Now, businesses can know how easily vulnerabilities can be accessed by attackers, 
enabling remediation efforts to be prioritized faster and more reliably. 
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See, in real time, which vulnerabilities should be patched first to eliminate the most risk. 


FireMon’s Risk Analyzer dynamically obtains vulnerability scan results from 
QualysGuard and correlates them with network topology and security configuration 
data from FireMon’s Security Manager. Risk Analyzer uses the combined information 
to determine whether vulnerabilities can actually be reached by attackers or are 
mitigated by other network defenses. Such real-time insights enable organizations to 
focus their valuable IT resources first on fixing those systems that are at the greatest 
risk. The effectiveness of these remediation efforts can then be checked by performing 
simulated attacks using FireMon Security Manager’s interactive network maps. 


The Bottom Line 

This joint solution by Qualys and FireMon gives organizations an automated, real- 
time view of the security posture of their networks. It enables IT teams to reduce the 
most risk in the shortest time, and provides an immediate way to verify the impact of 
their remediation actions. The result is a risk-centric approach to operations that 
reliably delivers better security and compliance with less effort and expense. 


Real-time, Risk-centric Vulnerability Discovery and Remediation with Qualys and FireMon 


About FireMon 

FireMon is the industry leader in 
providing enterprises, government 
and managed services providers 
with advanced security 
management solutions that deliver 
deeper visibility and tighter control 
over their network security 
infrastructure. The integrated 
FireMon solution suite — Security 
Manager, Policy Planner and Risk 
Analyzer — enables customers to 
identify network risk, proactively 
prevent access to vulnerable 
assets, clean up firewall policies, 
automate compliance, strengthen 
security throughout the 
organization, and reduce the cost 
of security operations. For more 
information, visit firemon.com. 


About Qualys 
Qualys, Inc. is the leading provider 
of cloud security and compliance 


solutions with over 6,000 customers 
in more than 100 countries, including 


a majority of each of the Forbes 
Global 100 and Fortune 100. 


The QualysGuard Cloud Platform 
and integrated suite of solutions 
help organizations simplify 
security operations and lower the 
cost of compliance by delivering 
critical security intelligence on 
demand and automating the full 
spectrum of auditing, compliance 
and protection for IT systems and 
web applications. Founded in 
1999, Qualys has established 
strategic partnerships with leading 
managed service providers and 
consulting organizations, including 
Accuvant, BT, Dell SecureWorks, 
Fujitsu, NTT, Symantec, Verizon, 
and Wipro. The company is also a 
founding member of the Cloud 


The integration of FireMon Security Manager’s Risk Analyzer with QualysGuard: 


Graphically shows which vulnerable systems are most accessible to 
attackers — combines state-of-the-art vulnerability intelligence with real-time 
knowledge of the surrounding network topology to highlight on a network map 
which systems are at the most risk. 


Helps prioritize remediation efforts to get the most improvement for the 
least effort — identifies which systems to patch first to reduce the most risk. 


Makes it simple to simulate attacks on vulnerable and remediated systems 
— evaluates the outcome of patching efforts. 


Enables a risk-centric approach to managing vulnerabilities — provides a 
real-time view of a network’s security posture and focuses operations on those 
systems that can benefit the most from improvements in security. 


Works globally across even the largest networks — pairs the accuracy and 
scalability of the QualysGuard Cloud Platform and the FireMon Security Manager 
suite to enable rapid deployment and seamless use in networks of any size. 


17231.254024 


172.31.230.024 


Gate-008-004 


== 
ma 
BE 
z Ba 


i = 
=a PwnHTtO0An2 
1310n A 
f+ 


= 
197.48.20.161 


With the FireMon and Qualys joint solution, attacks on vulnerable assets can be simulated, 
providing an immediate way to evaluate remediation efforts. 


Security Alliance (CSA). For more 
information, visit qualys.com. 
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